Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f76388e2-5824-485d-aa99-c7ea5a481aa2.roa
File: f76388e2-5824-485d-aa99-c7ea5a481aa2.roa (raw, json)
Hash identifier: y4W6K7uO+cEC4861Ot4RUdR+SdcE+vHQMMOs8wfGpbw=
Subject key identifier: A4:61:2E:60:D3:36:6A:3A:2F:BB:A5:D7:3E:8D:E1:EA:E2:88:85:7B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2EEAA684433FD8533BBE76D6F35CD0C4720D2D21
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f76388e2-5824-485d-aa99-c7ea5a481aa2.roa
Signing time: Tue 05 Aug 2025 19:30:22 +0000
ROA not before: Tue 05 Aug 2025 19:30:22 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:e000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:ea:a6:84:43:3f:d8:53:3b:be:76:d6:f3:5c:d0:c4:72:0d:2d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 19:30:22 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=da8eeb60adb6886afd53ea6a18d50fc7c7dfbec489a18dcd40295f3b79edaf50, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5d:e2:fe:c6:22:4e:1f:ed:a1:35:78:95:8d:
d1:00:4d:01:bc:1d:f6:22:1c:d1:2f:46:13:cb:30:
f8:3b:7a:60:79:80:43:f2:17:fd:30:31:f9:28:5c:
6a:2e:72:ae:86:fb:ca:c4:e1:c3:0a:87:d1:7f:55:
c5:8c:ce:f3:f1:aa:0f:a5:c9:ee:e2:82:7f:d4:37:
b4:81:78:fc:ef:de:70:0a:b5:c6:55:f1:ca:07:00:
ae:43:57:b8:1e:54:a8:10:e9:28:04:b9:97:41:ee:
76:3d:b0:89:49:5e:00:73:6e:10:7e:01:6e:7e:5f:
3c:4a:fd:94:24:38:31:a3:a3:35:ff:e0:fe:26:d4:
e8:90:bf:c6:07:b7:19:59:31:a6:43:ee:24:f3:77:
97:88:98:59:40:00:c9:7c:1c:19:db:b7:76:e4:2f:
e7:55:40:b2:eb:1b:b3:2b:c6:94:cf:2a:62:5f:bc:
cb:84:65:5d:d1:50:bf:b9:f1:c7:a7:d1:5f:33:cc:
f9:af:c4:1a:99:fe:54:23:c0:2c:35:bc:96:64:6b:
14:f3:6b:4a:3a:58:88:da:db:76:b3:b6:e3:aa:cf:
d9:28:dd:73:0a:aa:13:7d:e0:1d:69:79:03:13:14:
29:49:92:d6:35:9a:99:3a:10:f9:19:ee:03:1c:a7:
23:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:61:2E:60:D3:36:6A:3A:2F:BB:A5:D7:3E:8D:E1:EA:E2:88:85:7B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f76388e2-5824-485d-aa99-c7ea5a481aa2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:e000::/40
Signature Algorithm: sha256WithRSAEncryption
91:e8:61:66:02:83:54:0a:4f:4c:3d:fb:8c:fd:7e:e7:4b:e6:
c2:76:b5:0e:9f:6e:bb:75:aa:ff:3c:23:a3:c3:5e:00:5a:1c:
ef:8e:16:e8:f0:88:6b:cc:b8:3d:05:39:10:01:9d:cd:91:81:
9e:d8:f2:2f:bb:15:3e:79:c3:4b:07:ef:97:0d:d1:fe:16:4b:
4c:19:56:e5:07:1a:e1:ed:4d:02:37:4e:9c:90:ac:7a:5b:a3:
6d:1f:88:84:60:48:ed:a0:a7:da:d9:f9:4a:c2:75:10:23:77:
c8:68:5e:a0:fd:18:86:a8:20:1f:2d:eb:29:1c:f1:2b:03:4b:
86:a2:68:38:3d:d5:c1:1b:4b:d6:da:66:f6:00:51:67:94:6c:
3f:9b:d5:40:27:cb:63:bd:41:eb:b3:15:be:f7:d6:a9:c4:d5:
74:26:b3:b6:c0:1f:28:25:d7:00:0d:89:c9:23:9e:87:44:4e:
ae:87:74:aa:a3:6e:ef:4a:1c:d4:2a:1f:cf:82:06:8b:f6:ec:
3c:db:8b:a9:07:a7:1b:c1:11:8b:8c:02:1d:e2:61:a9:48:59:
0a:27:6f:b2:cb:9b:58:d0:c9:32:db:c8:ef:0a:92:1b:fa:68:
f8:e3:88:bb:e4:95:80:eb:37:4c:01:22:e9:ab:94:dc:f1:98:
ef:ed:64:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:04:33 2025 by rpki-client